> Markdown version of [/jobs/ext/3686728-security-operations-center-soc-manager](https://www.wearedevelopers.com/jobs/ext/3686728-security-operations-center-soc-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Operations Center (SOC) Manager - **Company:** Consumer Cellular - **Location:** Scottsdale, AZ, United States - **Experience:** Experienced - **Salary:** $132,300.0 - $198,450.0 - **Contract:** Permanent contract - **Skills:** Data Analysis, Bash Shell, Business Systems, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Computer Engineering, Intrusion Detection and Prevention, Python (Programming Language), PCI Data Security Standards, Windows PowerShell, Security Information and Event Management, Systems Integration, Software Vulnerability Management, Scripting, Cyber Threat Analysis, Agentic-AI, Information Technology, Cybercrime - **Published:** October 11, 2026 - **Apply:** https://startup.jobs/soc-manager-consumer-cellular-10357354 ## About the Role * 4-year college degree, preferably in Computer Science, Information Technology, Computer Engineering, Information Systems or a related technical field. * 6 years of information security experience. * 5 years of combined technical experience with major enterprise business systems and related technologies, including experience in management or in a leadership role. * 4 years of experience working in a Security Operations Center preferred. * Minimum of 2 years of experience building or operating an automation-driven or Agentic SOC, including detection engineering and security automation, strongly preferred. * Demonstrated ability to lead employees and external partners, develop SOC talent, manage stakeholder expectations, and drive measurable security operations improvements./span> * Working knowledge of applicable cybersecurity and compliance frameworks, including NIST, ISO 27001, and PCI DSS. * Demonstrated ability to prioritize and manage multiple complex assignments with sound judgment, discretion, and professionalism; communicate clearly in writing and verbally; and deliver prompt, transparent, and appropriately targeted incident notifications. * Strong understanding of security operations metrics and key performance indicators used to measure detection effectiveness, response performance, service quality, and operational maturity. * Experience using scripting languages such as PowerShell, Python, or Bash to automate security operations, data analysis, and response workflows. * Broad cybersecurity knowledge, including current threat actors, advanced persistent threat groups, common attack methodologies, tactics, techniques, protocols, and relevant industry trends. * Demonstrated cyber incident response experience, including applying lessons learned to improve detection, response procedures, and operational readiness. * Working knowledge of SIEM and security event monitoring, incident response, detection engineering, proactive threat hunting, and SOAR-based automation, with the ability to guide detection tuning, coverage-gap analysis, and automated response workflow development. * Experience integrating and operating security platforms across detection, cloud, and vulnerability data, including MDR or Agentic SOC models, CNAPP tooling such as Upwind, vulnerability management platforms such as Rapid7 InsightVM, and security operations platforms such as ReliaQuest GreyMatter; experience managing MDR or managed service provider relationships against defined service levels and outcomes. * Ability to develop actionable telecom-sector threat intelligence that informs detection engineering, threat hunting, and incident response priorities. * Work Environment: Office-based, with participation in incident response and crisis communication activities as operational needs require. ## Description The Security Operations Center (SOC) Manager is a full-time leadership role responsible for building and leading a proactive, engineering-driven, and highly automated SOC that integrates threat hunting, detection engineering, threat intelligence, vulnerability management, cloud security, incident response, people leadership, security platforms, and managed detection and response services., * Lead the transformation to an Agentic SOC by advancing automation, threat hunting, detection engineering, and threat intelligence; designing automated response workflows; and reducing repetitive analyst work and manual alert processing. * Establish and mature a proactive threat hunting program to identify hidden and emerging threats, including telecom-sector threats targeting Consumer Cellular. * Lead detection engineering to tune detections, identify coverage gaps, and create Consumer Cellular-specific detection rules * Direct the production of telecom-focused threat intelligence reporting to inform detection, hunting, and response priorities * Oversee SOC security platforms and integrations, including ReliaQuest GreyMatter, Upwind CNAPP, and Rapid7 InsightVM, to provide unified visibility across cloud, vulnerability, and detection data; manage the MDR partner against defined service levels and outcomes. * Manage daily SOC operations by monitoring alert and ticket queues, assessing scope, urgency, impact, and vulnerabilities, maintaining awareness of major incidents, ensuring effective shift handoffs, resolving operational issues, and driving timely incident detection, response, and resolution. * Hire, train, coach, and evaluate SOC staff; manage scheduling, onboarding, and professional development; and build the competencies needed to anticipate, manage, and mitigate security risk. * Build internal engineering capability and retrain existing SOC personnel into automation-focused security engineers, reducing reliance on managed service providers. * Maintain sufficient operational and engineering knowledge across supported security solutions and platforms to guide decisions, evaluate technical work, and provide effective leadership during incidents. * Establish and maintain SOC operating procedures, strengthen post-incident feedback loops with the Incident Response team, and continuously improve detection and operational processes through lessons learned, innovation, and change. * Establish a unified SOC operating model that connects vulnerability management, cloud security, detection engineering, and incident response; integrates alert sources; defines operational metrics; and provides quarterly security operations reporting to senior management. * Develop and maintain crisis communication plans that support timely, transparent, and appropriately targeted notifications during security incidents.